CVE-2007-6333

medium HPE
CVSS v3 Base Score
5.8
AV:N/AC:M/Au:N/C:P/I:P/A:N
EPSS Score
30.7%
Exploitation probability in 30 days
Top 3% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
M
Confidentiality
P
Integrity
P
Availability
None
Published: December 13, 2007 (6726 days ago)
Last Modified: April 23, 2026
Vendor: HPE
Source: NVD

Description

The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, allows remote attackers to read arbitrary registry values via the arguments to the GetRegValue method.

CWE

NVD-CWE-Other

Affected Products

hp info centerhp quick launch button

References

🔗 h20000.www2.hp.com 🔗 secunia.com 🔗 securitytracker.com 🔗 www.anspi.pl 🔗 www.securityfocus.com